Static task
static1
Behavioral task
behavioral1
Sample
64a06306b3b68f3e489dc6cf57296420.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64a06306b3b68f3e489dc6cf57296420.dll
Resource
win10v2004-20231215-en
General
-
Target
64a06306b3b68f3e489dc6cf57296420
-
Size
93KB
-
MD5
64a06306b3b68f3e489dc6cf57296420
-
SHA1
eead14996804b1b48e9e0fbf2c079a658769d61d
-
SHA256
c37c8d793971b66917a1fb8463e5255ef2a20b4a6ae902cfe45802364c956217
-
SHA512
6ae90180968b1fd198b1512780362f910271ade0e6a1d3ea4286e260ed3dc49c9d30e46e57b6165f873dbbac4796ae9ec1a9c34e7fb4cada9fd4f03766b7c255
-
SSDEEP
1536:O/IBuAzbrf3Ktx19lESiCEpeFP9zCuy+c2Y4c0oGet03q9aOZKJyQoppAptc8Lp:OQzbz672SPUeb5y+cP4foGfONZcmppAp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a06306b3b68f3e489dc6cf57296420
Files
-
64a06306b3b68f3e489dc6cf57296420.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE